Matt Kettler a écrit :
mouss wrote:
some spams use the recipient address as their From header. This causes
AWL to put a significant negative score.
It shouldn't. Is your trusted_networks set correctly?
In general the AWL should look at the first-untrusted IP address for the message
in addition to the from address.
now that you say it!
I have checked my awl and found an entry with ip='none'. (running sa
with -D -t showed this).
This entry had a very negative score.
where do such entries come from (I mean IP='none')?
I had a missing entry in my trust path that I fixed lately. would that
be the reason for such entries?
now, can I safely remove them?
If your trust path is incorrectly set, SA might interpret all messages as coming
from the same IP, thus be vulnerable to this forgery. However, with
trusted_networks set properly this is no longer a problem, as a message from
[EMAIL PROTECTED] sent via ip 1.1.1.1 is not treated the same as
[EMAIL PROTECTED] sent via ip 208.39.141.86.
yes, I forgot that.
Thanks a lot.
